CVE-2003-1385: Code Injection
ipchat.php in Invision Power Board 1.1.1 allows remote attackers to execute arbitrary PHP code, if registerglobals is enabled, by modifying the rootpath parameter to reference a URL on a remote web server that contains the code.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable register_globals in PHP (set register_globals = Off in php.ini) and restart the web server to prevent ipchat.php from executing remote PHP code via a manipulated root_path parameter.
PHP register_globals = Off
Event History
Frequently Asked Questions
What is the severity of CVE-2003-1385?
CVE-2003-1385 is considered high severity due to the potential for remote code execution.
How do I fix CVE-2003-1385?
To fix CVE-2003-1385, disable register_globals in your PHP configuration and upgrade to a newer version of Invision Power Board.
What software is affected by CVE-2003-1385?
CVE-2003-1385 affects Invision Power Board version 1.1.1.
What type of attack can be executed using CVE-2003-1385?
CVE-2003-1385 allows remote attackers to execute arbitrary PHP code on the vulnerable server.
Is there a workaround for CVE-2003-1385 if immediate patching is not possible?
If immediate patching is not possible for CVE-2003-1385, ensure that register_globals is disabled to mitigate the risk.